Personal Data Protection Notice

Urus Services Sdn Bhd

Last Update: January 2026

Introduction

Urus Services Sdn Bhd ("we", "us", or "our") is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 ("PDPA") of Malaysia. This notice explains how we collect, use, disclose, and protect your personal information.

Personal Data We Collect

We may collect the following types of personal data:

  • Identity Information: Name, NRIC/Passport number, date of birth
  • Contact Information: Phone number, email address, residential address
  • Vehicle Information: Vehicle registration number, make, model, year, engine capacity
  • Insurance Information: Current insurance provider, policy details, no-claims discount (NCD) information
  • Road Tax Information: Expiry dates, renewal history
  • Payment Information: Banking details for payment processing
  • Communications: Records of your interactions with us via phone, email, or chat

How We Use Your Personal Data

We collect and process your personal data for the following purposes:

  • Processing insurance and road tax renewal services
  • Verifying your identity and vehicle ownership
  • Communicating with you regarding your requests and services
  • Sending renewal reminders and important notifications
  • Processing payments and maintaining transaction records
  • Improving our services and customer experience
  • Complying with legal and regulatory requirements
  • Preventing fraud and unauthorized activities

Disclosure of Personal Data

We may disclose your personal data to:

  • Insurance Companies: To obtain quotations and process insurance policies
  • Road Transport Department (JPJ): For road tax renewal purposes
  • Legal Authorities: When required by law or to protect our rights

Your Rights Under PDPA

Under the Personal Data Protection Act 2010, you have the right to:

  • Access: Request access to your personal data we hold
  • Correction: Request correction of inaccurate or incomplete data
  • Withdrawal: Withdraw consent for processing (subject to legal obligations)
  • Limitation: Limit the processing of your personal data in certain circumstances

To exercise these rights, please contact us using the details provided below.

Data Retention Period

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Specific retention periods:

  • Active Insurance Policies: Policy term + 7 years after expiry (regulatory compliance)
  • Insurance Quotes:
    • Accepted quotes: 7 years (treated as policy records)
    • Declined/expired quotes: 1 year from quote date
  • Lead Submissions (Not Converted): 12 months from submission, then automatically deleted
  • Communication Logs (WhatsApp/SMS/Email): 6 years (for dispute resolution and audit)
  • Vehicle & Customer Information:
    • Active customers: retained while relationship exists + 7 years after last policy
    • Inactive customers: 1 year of inactivity, then reviewed for deletion

We automatically delete data when retention periods expire, subject to legal and regulatory obligations. You may request earlier deletion where permitted by law.

Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These include:

  • Encryption of sensitive data in transit and at rest
  • Secure data storage systems with access controls
  • Role-based access controls and authentication
  • Regular security audits and assessments
  • Staff training on data protection practices
  • Secure data processing agreements with all service providers

Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, it will be securely deleted or anonymized.

Contact Us

If you have any questions, concerns, or requests regarding this Personal Data Protection Notice or how we handle your personal data, please contact us:

Urus Services Sdn Bhd